This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4111 Views
  • 0 replies
  • 0 Likes

Resolved! Traffic showing from wrong zone

Hello all, I have a (hopefully) simple problem I can't seem to figure out.I have recently created a new DMZ zone on my PA for guest users, but when a guest tries to access the internet, the traffic is showing as sourcing from the trust zone instead of the DMZ zone. A trace from the guest user makes it to the PA, then dies. I have the policy from...

Resolved! Windows and User-Mappings

I have a user group in Active Directory where we place users who should not reach the internet. This user group is then tied to a Palo Alto rule to Deny access.I've noticed (Windows PC) this week, that if a user who is in the Deny group logs in to a PC, they will be denied (works fine), however, lets say they log out and a person who should have...

Response Page: GlobalProtect Portal Login Page

greetings! up until panos 8.0.7, i could reference logos and background pictures for my custom portal login page on secondary https servers. the web client would load them and display them. now with panos 8.0.8, these externally hosted pictures do not get displayed by the client due to newly set http headers named "content security policy" et al...

Resolved! DNSproxy resolve fail msgs - only I am not using this feature!

I'm getting system log errors that state " failed to resolve domain... etc" and lists the dnsproxy as the type and resolve-fail as the event. This is all really cool - but I have NOT set DNS proxy up - ever. If I dig through the logs - I can see a time where "Dnsproxy object:mgmt-obj was enabled" - however I do not know why it would state so as ...

craiglunt by • L1 Bithead
  • 11488 Views
  • 11 replies
  • 0 Likes

Resolved! Captive Portal is not presented for wireless users

Hello All, PA3020PAN-OS 7.1.4-h2 Having a strange issue with Captive Portal on PA3020 where the captive portal just suddenly has stopped working. Did a management server restart, tested with the PC directly connected into the Guest-VLAN over the wire received a CP page and was able to surf the internet. Same VLAN on the other location (differen...

CP1.PNG
CP2.PNG
CP3.PNG
CP4.PNG

Global protect portal redirect to https

Hi, We have a Palo alto in which if you try to access to the global protect portal using http, its automactically redirected to https.For example: if we access to http://vpn.xxx.com , the browser redirects to https://vpn.xxx.com. So thats perfect. But we have another PA with another GP Portal (https://vpn.yyy.com, in which is not redirected to h...

BigPalo by • L4 Transporter
  • 5931 Views
  • 4 replies
  • 0 Likes

External Dynamic List exceptions

Hello, We have recently upgraded our FW to PanOS 8.x (currently running 8.0.8) and we want to use the newly added feature that enable to add exceptions in External Dynamic List. However it doesn't seem to work since the configured IP we put in exceptions (in a IP list) are still blocked by our policy. Did you try this and does it work for you ?

GlobalProtect internal gateways

I'm struggling with GlobalProtect and always on.I have it configuerd for Multi-gateways and that part works great. My issue is when I switch WiFi networks to internal, the globalprotect still tries to connect. I have added internal host detection and put down an IP and Hostname of a server. If I disbale the globalprotect from systray. I'm able...

Amory by • L1 Bithead
  • 4581 Views
  • 5 replies
  • 0 Likes

Running config not synchronized - Sync to peer

Hello ! We encounter a problem on a power supply on one of our Palo Alto. Since power supply replacement, we've the message "Running config not synchronized - Sync to peer" but i've one question : Is the active firewall configuration will be pushed on passive active firewall ? Other question, since we've connected "new" firewall, in our Panora...

Passive firewall initiating syslog connection

We've syslog configured on devices with tcp protocol on port 515. Our passive device syslog connection is breaking every 300 seconds. Can you help in understand why passive palo alto not sending keep-alive?

amey_13 by • L1 Bithead
  • 4764 Views
  • 5 replies
  • 0 Likes

Sanity Check on a VPN Design

Greetings all, I've been asked to set up a secure desktop for one of our departments. The desktop will need access to a few on premises resources such as DHCP, DNS, and AD but, otherwise, it has to be restricted to allow connectivity only to a specific website. I can do this simply with a VLAN setup but this leaves open the possibility of a mis...

jsalmans by • L4 Transporter
  • 3403 Views
  • 5 replies
  • 0 Likes

User identification error with AD

Hello everybody!I have a problem with user identification and accordingly with security Policy.In different computer, the same user is seen "user" or "domain\user".The rules for work must have both type of user format. This is a big limitation.Where I have made the mistake?Help me please.Thanks.Daniele

Microsoft Active Directory DCSync Attempt Detection Vulnerabilitiy

Today I got many critical alerts from Palo Alto Firewall. Threat Type: vulnerabilityThreat Name: Microsoft Active Directory DCSync Attempt DetectionID: 54406Category: info-leakContent Version: AppThreat-8010-4662Severity: critical Does anyone has the same issue? Can somebody share the details of this attack?

qafcopa by • L1 Bithead
  • 8718 Views
  • 1 replies
  • 0 Likes
  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks